Snyk's MCP server, built into the Snyk CLI, lets AI agents run Snyk security scans on code, open-source dependencies, infrastructure as code, containers and SBOMs. It also provides package health checks and AI-BOM generation. Authentication is handled through the Snyk CLI auth flow.
Connect
- 1Add the server to Codex
codex mcp add snyk -- npx -y snyk@latest mcp -t stdio
Configs are generated from the publisher's documented endpoint. Check their docs for plan requirements and scopes. New to this? Read the step-by-step tutorial.
Tools 11
snyk_sca_scansnyk_code_scansnyk_iac_scansnyk_container_scansnyk_sbom_scansnyk_aibomsnyk_package_health_checksnyk_trustsnyk_authsnyk_logoutsnyk_versionThings to ask
- “Scan this project's dependencies for vulnerabilities”
- “Run a Snyk Code scan on the files I just changed”
- “Check my Terraform for misconfigurations”
- “Is the package lodash healthy to use?”